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10 BIOMETRIC CERTIFICATES 

BACKGROUND OF THE INVENTION 

1. FIELD OF THE INVENTION 

This disclosure relates generally to the field of secure 
communications, and in particular to the issuance and 
15 management of certificates for authenticating messages. 

2. DESCRIPTION OF RELATED ART 

The use of computer networks and telecommunication systems 
for various transactions has markedly increased in recent 
20 years. Traditional transactions such as shopping, purchasing, 
banking, and investment services have experienced growth in new 
directions due to the application of computers and 
telecommunications . 

While traditional transactions have heretofore been 
25 conducted typically on a person-to-person basis, many 

telecommunication-based transactions are conducted remotely and 
sight-unseen; i.e. the participants in telecommunication- based 
transactions may never meet. 

With such telecommunication-based transactions, there is 
30 an increasing need to recognize and verify the authenticity of 
a remote user of electronic services, including such services 
involving consumers of all types of electronic transactions 
such as purchases over the Internet, home banking, electronic 
transfers of funds, and electronic brokerage services. Such 
35 electronic transactions, may also involve users of remote 
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repositories of data, for example, to access classified 
records, medical records, billing records, and unclassified but 
sensitive data, such as company records. Other relevant areas 
requiring adequate or even absolute security include 
authentication of signers of electronic documents such as 
contracts. In general, any electronic service of value, 
provided over a local network or a public network, requires 
authentication of the requester in order to protect the value 
of the service. More valuable services typically require a 
greater degree of authentication. 

Historically, access to electronic services has been 
provided through identification techniques such as account 
names and authentication techniques such as personal 
identification numbers (PINs) and passwords. Such 
authentication techniques have not proven to be very secure 
since PINs and passwords are often easily guessed, hard to 
remember, or subject to discovery by exhaustive automated 
searches. Recently, digital certificates have emerged as a 
leading candidate for authenticating electronic transactions. 

Ideally, a digital certificate, such as those defined by 
the X.509 and ANSI X.9 standards, allows users or buyers and 
sellers to authenticate electronic documents and electronic 
transactions in a manner analogous to the authentication of 
documents by a Notary Public in person-to-person transactions. 
The combination of cryptographic techniques, including public 
key cryptography, and the use of digital certificates provides 
greater integrity, privacy and a degree of authentication for 
on-line electronic transactions which instills a greater level 
of confidence in the electronic services consumer. 

For example, such authenticating certificates in the prior 
art may be generated by concatenating a message and a public 
key with a set 10 of data as shown in FIG. 1, which may be in a 
sequence and which may include a subject unique ID 12 
corresponding to the subject; that is, the individual or entity 
such as a corporation, having the public key. As shown in FIG. 
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1, other fields in the set 10 of data may include a version 
number, a serial number for the certificate with respect to a 
sequence of generated certificates, the name of the issuer, a 
validity period to determine an expiration of validity of the 
5 certificate, a subject name identifying the user or individual 
sending the transaction, a issuer unique ID number, and other 
data extensions indicating privileges and attributes of the 
certificate, such as access privileges. 

The subject unique ID 12 of the user may include M bits 
10 representing, for example, a social security number or a 
password associated with the user sending the transaction. 
Typically, 

M ~ 50 bits ~ 6 bytes or less. 

The authenticating certificate, being the concatenation of 
15 the set 10 of data with the public key and the transaction 

data, is then processed, for example, using a hash function 

such as a one-way hashing function, to generate a hashed value. 

The hashed value is then signed; that is, encrypted, using the 

private key of the user to generate a digital signature 14 . 
20 The digital signature 14 is then appended to the authenticating 

certificate and the message, such as an electronic transaction, 

for transmission over, for example, a network. 

The X.509 and ANSI X.9 standards described above 

incorporate a hash function to generate unique digital 
25 signatures 14 from a respective set 10 of data. Such one-way 

hashing functions enable the transaction data to be 

computationally infeasible to derive solely from the hash 

value . 

While the use in the prior art of authenticating 
30 certificates incorporating digital certificates improves 
transactions employing electronic authentication, it still 
falls short of actually authenticating a human transactor, such 
as a consumer. Instead, such digital certificates in the prior 
art only authenticate the private cryptographic key used in the 
35 transaction or signature. Since private keys are physically 
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stored on computers and/or electronic storage devices, such 
private keys are not physically related to the entities 
associated with the private keys. For example, a private key 
is assigned to an entity, which may be a group of people, an 
5 organization such as a company, or even groups of 

organizations, and so private keys are not limited to actual 
human individuals. 

Identification indica of individuals may be subdivided 
into three broad categories: indica based on the physical 
10 characteristics of the individual, that is, what the individual 
is; indicia based on one's knowledge, such as passwords known 
to the individual; and indicia based on assigned information, 
that is, what another individual has associated with the 
identified individual, or what the identified individual 
15 chooses with which to be associated. The first category having 
physical indicia relates to the biometric data of an 
individual, and includes characteristic features such as 
genetic composition, fingerprints, hand geometry, iris and 
retinal appearance, etc., which are unique to each individual, 
20 with known exceptions such as the identical genetic 
compositions of twins. 

The second and third categories having known and/or 
assigned indicia includes information which the individual 
knows and/or is charged with memorizing and divulging for 
25 authentication, such as social security number, mother's maiden 
name, access codes such as long distance calling card numbers, 
and personal passwords. The second category also includes 
information and/or objects which the individual owns and/or is 
charged with carrying and divulging for authentication, such as 
30 driver's licenses and passports. 

Private keys are assigned indicia. Accordingly, the lack 
of physical identification of a human transactor with a private 
key is a flaw in authentication techniques in the prior art 
using such private keys. Other authentication and security 
35 techniques in the prior art are similarly flawed, since many 
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authentication and security techniques rely on identification 
indicia of the second category. 

Techniques are known in the art for authenticating an 
individual based on identification indica of the first 
category; that is, by physical characteristics. For example, 
U.S. Patent No. 4,641,349 to Flora et al- discloses a system for 
performing iris recognition. Typically, such physical 
characteristics identifying techniques require complicated 
computational operations for the capture and accurate 
classification of physical characteristics, since such physical 
characteristics are unique to each individual. Accordingly, 
the identification indicia for such physical characteristics 
generally requires a relatively large amount of memory to store 
and classify such identification indicia. 

Heretofore, the relatively large computational demands of 
authentication techniques based on physical characteristics has 
prevented such authentication techniques from being implemented 
in electronic transactions. 

SUMMARY OF THE INVENTION 

It is recognized herein that biometric identification and 

classification in the authentication of electronic transactions 

provides for increased security and accuracy. 

A biometric certification system and method are disclosed 

herein which implements an end-to-end security mechanism 

binding the biometric identification of consumers with digital 
certificates. The biometric certification system authenticates 
electronic transactions involving a user, and includes a 
biometric input device which responds to a set of physical 
characteristics of the user, and generates corresponding first 
biometric data related to the physical condition of the user. 

Biometric data is pre-stored as biometric certificates in 
a biometric database of the biometric certificate management 
system by receiving data corresponding to physical 
characteristics of registered users through a biometric input 
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device. Subsequent transactions to be conducted over a network 
have transaction biometric data generated from the physical 
characteristics of a current user, which is then appended to 
the transaction first data, and which then authenticates the 
5 user by comparison against the pre-stored biometric data of the 
physical characteristics of users in the biometric database. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The features of the disclosed biometric certification 
10 system and method are readily apparent and are to be understood 
by referring to the following detailed description of the 
preferred embodiments of the present invention, taken in 
conjunction with the accompanying drawings, in which: 

FIG. 1 illustrates an authenticating certificate in the 

15 prior art; 

FIG. 2 illustrates a biometric certificate of the 
disclosed biometric certification system and method; 

FIG. 3 illustrates a biometric certificate registration 
apparatus; 

20 FIG. 4 illustrates an electronic transaction transmission 

section; and 

FIG. 5 illustrates an electronic transaction reception and 
processing section. 

25 DESCRIPTION OF THE PREFERRED EMBODIMENTS 

Referring in specific detail to the drawings, with common 
reference numbers identifying similar or identical elements, 
steps, and features, as shown in FIG. 2 the present disclosure 
describes a biometric certification system and method for 

30 generating biometric certificates from a set 16 of data, 
including a subject unique ID 18 and biometric data 20. A 
digital signature 22 generated using data set 16 is then 
appended to the data set 16 to form the biometric certificate, 
as shown in FIG. 2. 

35 The disclosed biometric certification system is shown in 
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FIGS. 3-5, having biometric registration section 24 shown in 
FIG. 3, a transmitting section 40 shown in FIG. 4, and a 
receiving section 42 shown in FIG. 5. The biometric 
registration section 24 processes user biometrics and 
5 associated inputs to generate biometric certificates which are 
unique to the user, and which are stored in a memory such as a 
biometric database and/or a smart card memory. Once such 
biometric certificates are stored, a first user may conduct 
biometrically- secured electronic transactions sent from the 
10 transaction transmission section 40 of FIG. 4 to the 

transaction reception section 4 2 of FIG. 5, at which the 
electronic transaction is authenticated and processed. 

Referring to FIG. 3, the registration section 24 has a set 
of input devices, including a registration biometric input 
15 device 26 and a user data input device 28. The biometric input 
device 26 generates registration biometric data from the 
physical characteristics of the user, such as fingerprints, 
hand geometry, iris and retinal appearance, and speech 
patterns . 

20 The registration biometric input device 26 may include 

visual cameras and/or other visual readers to input 
fingerprints, hand geometry, iris appearance, and retinal 
appearance. For example, companies such as IDENTIX, FUJITSU, 
and AUTHENTEC provide such equipment for reading fingerprints, 

25 while RECOGNITION SYSTEMS provides equipment to read hand 
geometry. EYE-DENTIFY is an example of a company which 
provides retinal imaging devices, while IRISCAN and SENSAR are 
examples of companies which provide iris imaging devices. 

Alternatively, the registration biometric input device 26 

30 may be adapted to receive audio characteristics of a user. For 
example, a microphone in conjunction with a speech digitizer 
may be used to receive and digitize speech. Such companies as 
BBN, T-NETIX, and ALPHA- TEL provide such equipment for 
receiving and digitizing speech to generate corresponding 

35 biometric data. 
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Biometric input devices known in the art may be used to 
receive other physical characteristics such as facial and body 
appearance via, for example, a camera, as well as the genetic 
composition of the user by means of genetic material gathering 
5 procedures, such as blood lancets. 

The biometric certificate as shown in FIG. 2 may be 
generated by processing the registration biometric data from 
the registration biometric input device 26, processing the user 
input data such as a user ID from the user data input device 
10 28 , and processing the public key 30 of the user at a biometric 
certificate generator 32 of a registration authority 34. Such 
input data are processed with the private key 36 of a 
certifying authority to generate a digital biometric 
certificate 38 which is sent to the memory for storage and 
15 subsequent use to authenticate the first user and associated 
electronic transactions of the first user. 

The registration biometric data 20 to be incorporated into 
the biometric certificate of FIG. 2 is obtained directly from 
the physical characteristics of the subject through the 
20 biometric input device 26. The subject unique ID 18 of the 
user may include M bits, in which typically M « 50 bits ~ 6 
bytes or less, while the biometric data 20 typically includes 
much more data than the subject unique ID 18. Generally, the 
biometric data 20 has N bits in which N may be very large, such 
25 as about 500 bytes. In fact, the amount of the biometric data 
20 is unlimited; for example, a fingerprint may be visually 
scanned to any resolution to obtain key fingerprint aspects 
which uniquely distinguish fingerprints, or alternatively to 
obtain data representing pixels of the entire fingerprint. 
30 Accordingly, the biometric data 20 may require large amounts of 
memory for storage such as 2 kB or even 4 MB. Accordingly, in 
the preferred embodiment, N is much greater than M. 

Prior to use of the disclosed biometric certification 
system and method, the biometric database 66 is built using, 
35 for example, a registration process in which individuals are 
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required 1 to provide proof of identity; that is, identification 
information such as a birth certificate, a driver's license, 
current bank account data, credit card account data, etc. to be 
provided to a registration authority. Once the registration 
5 authority is satisfied with such proof, the identification 
information is entered into the registration system 24 and 
biometric measurements are then taken concurrently using at 
least one biometric input device 26, as shown in FIG. 3. 

Such stored biometric measurements form the pre-stored 
10 biometric data in the biometric database 66 which corresponds 
to the pre-registered individuals who have undergone the 
registration process described above. Accordingly, pre- 
registered individuals may be properly authenticated, while 
unregistered individuals are rejected, within the cross-over 
15 error rate. 

The biometric certificates 3 8 are then sent to be stored 
in a memory, such as a biometric database or a memory of a 
smart card, as shown as the memory 66 in FIG. 5. The 
registration system 24 of FIG. 3 may be located at a central 
20 registration station associated with a network, such that the 
corresponding biometric certificates of a user may be directly 
and securely stored in the memory 66, such as a central 
biometric database of a network or an individual memory of a 
smart card of the user. Accordingly, the central biometric 
25 database as the memory 66 may serve a network of users 
conducting transactions, such as electronic commerce (E- 
commerce) , over the Internet and other networks. 
Alternatively, a smart card of the first user having the memory 
66 may pre-store the biometric certificates, such that kiosks 
30 and other devices such as terminals and automatic teller 

machines (ATMs) may access the memory 66 and obtain the secured 
biometric certificate of the first user. 

Referring to FIGS. 4-5, to conduct an electronic 
transaction, the first user uses the transaction system 4 0 in 
35 FIG. 4. The first user uses a transaction biometric input 
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device 44 to generate transaction biometric data 46 as 
contemporaneous biometrics associate with the first user. The 
first user also generates transaction first data 50 through a 
transaction data input device 48. For example, the transaction 
first data 50 may include selections of products to be 
purchased over the Internet, or may include electronic funds 
transfers through an ATM. The transaction first data 50 also 
includes user ID data identifying the first user and 
associating the first user with the remainder of the 
transaction first data. 

Both of the transaction biometric data 46 and the 
transaction first data 50 are sent over the network 60 
unchanged and in the clear, or optionally encrypted by 
additional encryption techniques known in the art, to be 
received by the transaction reception section 42, as shown in 
FIG. 5. 

In addition, at the transaction transmission section 40 of 
FIG. 4, both of the transaction biometric data 46 and the 
transaction first data 50 are processed, for example, using a 
first hash' function 52, such as a one-way hashing function, to 
generate a first hashed value. RSA and SHA-1 are examples of 
public key cryptographic methods and one-way hashing which may 
be used for such encryption and hashing functions. The RSA 
method is described, for example, in U.S. Patent No. 4,405,829 
to Rivest et al., which is incorporated herein by reference. 
The SHA-1 method is described, for example, in U.S. Patent No. 
5,623,545 to Childs et al . , which is incorporated herein by 
reference. 

The first hashed value is then sent to a digital signature 
function 54, in which the hashed value is signed; that is, 
encrypted, using the private key 56 of the first user to 
generate a digital signature 58, incorporating the first hash 
value. The digital signature 58 is then sent to the network 
60. 

The set of data transmissions constituting the transaction 
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biometric data 46, the transaction first data 50, and the 
digital signature 58 may be sent as separate bitstreams and/or 
data packets, or otherwise may be sent together by appending 
the associated data sequences using a concatenator , such as an 
5 adder for bitwise adding of the data sequences. In addition, 
software may be used to append such data. The data 46, 50, and 
58 may be sent to the network 60, which may include telephone, 
networks, satellite communications, and/or the Internet. 
Referring to FIG. 5, after receiving the electronic 
10 transaction from the network 60, the receiving section 42 sends 
the user ID data 62 from the transaction first data 50 to be 
sent to a biometric certificate extractor 54. The biometric 
certificate extractor 54 uses the user ID data 62 to access a 
corresponding biometric certificate stored in the memory 66, 
15 such as the biometric database or smart card memory. That is, 
if the first user had previously stored corresponding biometric 
certificates generated from biometric characteristics of the 
first user using the registration system 24 shown in FIG. 3, 
the biometric certificate of the first user may be indexed 
20 according to the user ID data, such as the social security 
number, of the first user. 

The memory 66 may receive the user ID data 62, or 
otherwise may receive a command from the biometric certificate 
extractor 64 to retrieve any biometric certificate 
25 corresponding to the user ID data 62 of the first user. If 
none are available, the receiving section 42 may generate a 
rejection signal, for example, at the biometric certificate 
extractor 64, to indicate that no biometric certificate is 
available. 

30 Accordingly, any user requesting authentication of an 

electronic transaction but failing to be registered; that is, 
to have a corresponding pre-stored biometric certificate stored 
in the memory 66, is not authenticated. The receiving section 
42 may generate a corresponding message of non- authentication, 

35 and may also send such a message through the network 60 to the 
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transmitting section 40 to indicate no authenticity in the 
transaction. 

Otherwise, if a biometric certificate is available for the 
first user having corresponding user ID data, the biometric 
certificate 68 is retrieved and sent to the biometric 
certificate extractor 64 to decrypt the biometric certificate 
68 using the public key 70 of the certifying authority. Thus, 
the biometric certificate extractor 64 obtain the decrypted 
registration biometric data 72 and the decrypted user public 
key 74 associated with the first user. 

The decrypted user public key 74 is then sent to a 
decryptor to decrypt the digital signature 58 sent over the 
network 60 from the transmitting section 24. The decryptor 76 
then extracts the first hash value which was incorporated into 
the digital signature 58 by the first hash function 52, 

The receiving section 24 authenticates the first hash 
value by attempting to recreate the first hash value using a 
second hash function 78 which is identical to the first hash 
function 52 of the transmitting section 24. The second hash 
function 78 receives the transaction biometric data 46 and the 
transaction first data 50 from the network 60, which were sent 
from the transmitting section 24 in the clear, or optionally 
encrypted by additional encryption techniques known in the art. 
The second hash function 78 thus generates a second hash value 
from the same input data applied to the first hash function 52. 

The first and second hash values are then compared by a 
first classifier 80, such as a comparator or matching routines 
in software, for determining a match between the first and 
second hash values. A first validation signal 82 is generated 
to indicate whether or not both independently generated hash 

values match. 

If both match, then the receiving section 42 thus 
determines that both of the transaction biometric data 46 and 
the transaction first data 50, in combination, are authentic 
and have not been modified during transmission over the network 
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,» addition, the receiving section 42 determine, .whether 
th e electronic transaction is indeed £ ro„ the in ica ed ; 
corresponding to the transaction biometric data 46. t 
5 transaction biometric data 46 may not he auth ent^ or 
alternatively, the decrypted user public key 74 may 
key „ co-only shared by a specific group o£ people 
employees o£ a specitic company. 
~ Lcordingiy. the receiving section 42 
„ biometric data of the first user generated during the 

transaction, as the transaction biome«i= da ta * 
registration biometric data generated at an earlier d 
the first user during a registration process using the 
regis ration system 24. The registration biometric data which 
!S is decrypted by the biometric certificate extractor 4 to be 
the decrypted registration biometric data 72. is applied to a 
second classifier 84 to be compared to the transaction _ 
biometric data 46 which is sent over the network 60 in the 
clear, or optionally encrypted by additional encryptxon 
20 techniques known in the art. 

The second classifier 84 may be a comparator, or 
alternatively a software routine or other hardware/software 
devices implementing data matching techniques, for comparing 
the biometric data to obtain a decision value. Alternatively. 
25 the second classifier S4 may be a trained neural network and/or 
a fuzzy logic classifier for classifying whether or not. within 
an error tolerance, the sets of biometric data 46, 72 were 
obtained from the same individual using biometric input 
Lices. Such classification methods for authentication of 
30 images and data sequences using neural networks are describ ed. 
for example, in U.S. Patent Ho. 5.619.620 to Eccles, which 
incorporated herein by reference. 

The second classifier 84 then generates a decision in the 

form of a second validation signal 86, which may be logic 
form of or pALSEf indicatin g 

35 values corresponding to yes or wu, 
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.thentication th s-o, - « ; ass « " - ^ ^ 
percentages reflecting to re£le ct the error 

numerical values on an auth cros s-over 
~* t-Vio second classifier awu/ 
, tolerance of the secon Accordingly, the 

error rates associated with generate a crisp 

determination o£ tne au 

Using biometric ce^j. 
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w below about 2.0%, and 
identification and authenticat ion may >e ^ o£ more 

„ay even be also low as about 0. ^ classi fiers 80, 84 

advanced bio.et.ic ^t nUally perfect 

known in the art may obtain s population. 

5 authentication o£ any ^ ldU f <™J J 3y3 tem 

Tne disclosed biometnc «rt^cat ^ ^ 

ray include electronic — ^ ^ > pplica tion So. 
described in commonly assigned ^ ■ >viRT<JM) 
0 8/ ,70 . 8» . f iled December 20 , 1 ^ hereln by 

10 CERTIFICATE AUTHORITY , which IS incorp ^ ^ o£ 

such a system can be aoapteu 
reference. Such a y d .. crib ed herein for 
biometric certificates as d « c "* data o£ a user with 

cryptcgraphic.lly binding the b»-tr« certi£icates . 
identification information to form such 
» The use of public key technology allows t 

transaction/signature -^"^^ o£ th e 
centrally or remotely, depending upon the 

transaction. . f icat ion system and 

^Uthe disclosed "^e ^Herein lith 

„ method is TJZZL. « i. » - understood 

reference to the preferre be made 

that various modifications o£ the 

therein rTJTEl^JSU-. ~ " "* 

present inven t>on_ ^ \ot limited thereto, are to be 
25 examples suggested herein, d inve ntion. 
considered within the scope of the present 

f 
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WSai-lS_CI^Se_IS : , . fie ,tion system for certifying an 

53S ^-— Metric certxfxcatron y eiectronic tran sactxon 

el ectroaic transa cticn f « ; ^ transact ion first data, 

bio metric certificate ^ ^ for extracting 

data included in the transactxon f therefrom; 

re gistration biometric data and a user P ^ biometric 

a decryptor, £ ^ rie L g a first hash 

data and to the user public key, 

value fro* the digital to the transaction 

a hash function, ^ for generating a 

metric data and the transact^ fxrst da 

second hash value ther^rom; •£ ^ f irst hash value 

a first clasSlfie Y°" qe ^ era ting a first validatxon 
to the ■^^J^'^Mioa of the transaction 

2 . The biometric certification system «, ^ ^ 
wherein the biometric certificate xs xn 



user input data; 
the public key of the user; and 
the digital signature. 
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^ification system of claim 2, 
* The biometric certxf xcatxon y 

• nf the bit sequence includxng the fxrst 

w o^i C certification system of claim 1, 
4. the bxometrxc certxi-o. 
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• the first classifier includes a processor for 
wherein the first cedur es. 
performing data matching pro 

5 . The ^metric certification system of claim 1, 

further comprising: sparing the registration 

a second classifier to merric da ta, and for 

biometric data ana the ^nenticate the use,, 

generating a second validation s.gna! 

fixation system of claim 

6 . The bio-t«c c-rtxf x ^ ^ rai tra . ned 

wherein the second claesifi biometric database. 

a set of biometric data stored in the 

7 . A biometric certification system ^J^^^" 9 
5 „ eiectronic t-™^^^^; data, transaction 

! ° to a set of physical characteristics oj !J» ^ 

tr ansaction biometric input devxce P condition o£ 

transaction biometric data related to the P y 

the user; „ arerstQr responsive to 

a first hash function generator, 

" transaction first data ana the transaction biometric data. 

. *-«r hash value signal therefrom; 

derating a first ha h ^ ^ ^ 

fLm the hash value and a private key signal 
digital signature from the nasn 

30 of the user; and ^,-ativelY connected to the 

a receiving section operativeiy com 
transmitting sectJthrough a networ, the receiving sect.on 

including: certi£ icate extractor, responsive to 

. biometric certificate corresponding to user identification 
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(ID) data included in the transaction first data, for 
extracting registration biometric data and a user public key 
therefrom; 

a decryptor, responsive to the registration 
biometric data and to the user public key, for retrieving the 
first hash value from the digital signature; 

a second hash function generator, responsive to 
the transaction biometric data and the transaction first data, 
for generating a second hash value therefrom; and 

a first classifier for comparing the first hash 
value to the second hash value, and for generating a first 
validation signal to authenticate the transmission of the 
transaction first data and the transaction biometric data. 

8. The biometric certification system of claim 7, 
wherein the transaction biometric input device is a visual 
reader which obtains hand geometry images of the user to 
generate corresponding biometric data. 

9. The biometric certification system of claim 7/ 
wherein the transaction biometric input device is a visual 
reader which obtains iris images of the user to generate 
corresponding biometric data. 

10. The biometric certification system of claim 7, 
wherein the transaction biometric input device is a visual 
reader which obtains retinal images of the user to generate 
corresponding biometric data. 

11. The biometric certification system of claim 7, 
wherein the transaction biometric input device is a visual 
reader which obtains facial images of the user to generate 
corresponding biometric data. 

12. The biometric certification system of claim 7, 
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wherein the transaction biometric input device is a visual 
reader which obtains body images of the user to generate 
corresponding biometric data. 

13. The biometric certification system of claim 7, 
wherein the transaction biometric input device includes: 

a sound transducer that receives speech from the 

user; and 

a speech digitizer which digitizes the received 
speech to generate corresponding biometric data. 

14. The biometric certification system of claim 7, 
wherein the second classifier is a neural network trained from 
a set of biometric data stored in the biometric database. 

15. The biometric certification system of claim 7, 
further comprising: 

a logic circuit for generating a final validation 
signal from the first and second validation signals . 

16. A method for authenticating an electronic transaction 
involving a first user, comprising the steps of: 

registering a user, including the steps of: 

receiving a registration set of physical 
characteristics of the user at a biometric input device; 

generating registration biometric data 
corresponding to the registration set of physical 
characteristics ; 

generating a biometric certificate from the 
registration biometric data, user input data, the public key of 
the user, and a digital signature; and 

storing the biometric certificate in a memory; 
transmitting an electronic transaction over a 
network, the electronic transaction including transaction 
biometric data, transaction first data, and a digital signature. 
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generated therefrom, the step of transmitting including the 
steps of: 

receiving a current set of physical 
characteristics of the user; 
5 generating the transaction biometric data from 

the current set related to the physical condition of the user; 

generating a first hash value signal from the 
transaction first data and the transaction biometric data; 

generating the digital signature from the hash 
10 value and a private key signal of the user; and 

transmitting the digital signature over the 

network; and 

transmitting the transaction biometric data and 
the transaction first data over the network; and 
15 authenticating the electronic transaction, including 

the steps of: 

receiving the digital signature, the transaction 
biometric data and the transaction first data from the network; 

retrieving user identification (ID) data from 
20 the transaction first data; 

retrieving a biometric certificate corresponding 
to user ID data from a memory ; 

extracting registration biometric data and the 
user public key from the biometric certificate; 
25 decrypting the digital signature using the user 

public key to retrieve the first hash value from the digital 
signature; 

generating a second hash value from the 
transaction biometric data and the transaction first data; 
30 comparing the first hash value to the second 

hash value using a first classier; 

generating a first validation signal to 
authenticate the transmission of the transaction first data and 
the transaction biometric data; 
35 comparing the registration biometric data and 
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the transaction biometric data using second classifier; and 

generating a second validation signal to 
authenticate the user. 

17. The method of claim 16 , wherein the step of 
authenticating further comprises the steps of: 

ANDing the first and second validation signals. 

18. The method of claim 15, wherein the step of receiving 
a set of physical characteristics of the user includes the step 
of: 

receiving visual characteristics of the user using a 
visual reader as the registration biometric input device. 

19. The method of claim 15, wherein the step of receiving 
a set of physical characteristics of the user includes the step 
of: 

receiving speech characteristics of the user using a 
speech digitizer as the registration biometric input device. 

20. The method of claim 15, wherein the step of 
generating the registration biometric data includes the step of 
generating a bit sequence greater than about 500 bytes in 
length as the registration biometric data. 
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